Setup RDP to a windows 2003 domain controller

[Guest sphilip]

guys & gals,

 

im trying to setup RDP to my domain controller from within the LAN & also

outside access.

 

I have added the 2 users into the remote desktop users group in the active

directory & also I have gone into the terminal server configuration & inside

connections I have added this group & also the users individually but

whenever I try to logon I get this error

 

"To log on to this remote computer, you must have terminal server user

access permission on this computer. If you are not a member of the remote

desktop users gruop or another group that has these permission, or if the

remote desktop user group does not have these permissions, you must be

granted these permissions manually"

 

The DC is enabled to all remote computers to access this. We have another

server which is member server & not a DC & i can successfully logon using

RDP. I am sure i am missing something because I am trying to RDP into a DC.

 

Please advice

[Guest Henrik Johansson]

Re: Setup RDP to a windows 2003 domain controller

 

DC-GPO restricts that only administrators shall be able to logon to DC

 

"sphilip" <sphilip@discussions.microsoft.com> skrev i meddelandet

news:EC139006-F8B7-4BA3-8738-7E6989085B69@microsoft.com...

> guys & gals,

>

> im trying to setup RDP to my domain controller from within the LAN & also

> outside access.

>

> I have added the 2 users into the remote desktop users group in the active

> directory & also I have gone into the terminal server configuration &

> inside

> connections I have added this group & also the users individually but

> whenever I try to logon I get this error

>

> "To log on to this remote computer, you must have terminal server user

> access permission on this computer. If you are not a member of the remote

> desktop users gruop or another group that has these permission, or if the

> remote desktop user group does not have these permissions, you must be

> granted these permissions manually"

>

> The DC is enabled to all remote computers to access this. We have another

> server which is member server & not a DC & i can successfully logon using

> RDP. I am sure i am missing something because I am trying to RDP into a

> DC.

>

> Please advice

[Guest sphilip]

Re: Setup RDP to a windows 2003 domain controller

 

Yes i am trying to logon as the administrator & the 2nd user is a member of

the administrator group.

 

Is there any group policy i need to modify for me to access the server via RDP

 

"Henrik Johansson" wrote:

> Community Message Not Available

[Guest Vera Noest [MVP]]

Re: Setup RDP to a windows 2003 domain controller

 

Check this:

 

enable in the Default Domain Controller Policy:

Computer Configuration - Windows Settings - Security Settings - Local

Policies - User rights Assignment

"Allow log on through Terminal Services"

 

and add the Remote Desktop Users group to the list of allowed users

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?c3BoaWxpcA==?= <sphilip@discussions.microsoft.com> wrote

on 29 nov 2007 in microsoft.public.windows.terminal_services:

> Yes i am trying to logon as the administrator & the 2nd user is

> a member of the administrator group.

>

> Is there any group policy i need to modify for me to access the

> server via RDP

>

> "Henrik Johansson" wrote:

>

>> Community Message Not Available

[Guest sphilip]

Re: Setup RDP to a windows 2003 domain controller

 

Tnx vera, one quick question, when i make any changes in the policies it

comes with an error saying that changes cannot be made because i dont have

permissions, i am confused because i am logged on as the DC administrator,

any tips to clear this road block?

 

cheers

 

"Vera Noest [MVP]" wrote:

> Check this:

>

> enable in the Default Domain Controller Policy:

> Computer Configuration - Windows Settings - Security Settings - Local

> Policies - User rights Assignment

> "Allow log on through Terminal Services"

>

> and add the Remote Desktop Users group to the list of allowed users

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___

>

> =?Utf-8?B?c3BoaWxpcA==?= <sphilip@discussions.microsoft.com> wrote

> on 29 nov 2007 in microsoft.public.windows.terminal_services:

>

> > Yes i am trying to logon as the administrator & the 2nd user is

> > a member of the administrator group.

> >

> > Is there any group policy i need to modify for me to access the

> > server via RDP

> >

> > "Henrik Johansson" wrote:

> >

> >> Community Message Not Available

>

[Guest Vera Noest [MVP]]

Re: Setup RDP to a windows 2003 domain controller

 

I've no idea how permissions are set in your AD. Check the

permissions on the GPO, but be really careful before making any

changes! You don't want to mess up your Default Domain Controller

Policy.

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?c3BoaWxpcA==?= <sphilip@discussions.microsoft.com> wrote

on 30 nov 2007 in microsoft.public.windows.terminal_services:

> Tnx vera, one quick question, when i make any changes in the

> policies it comes with an error saying that changes cannot be

> made because i dont have permissions, i am confused because i am

> logged on as the DC administrator, any tips to clear this road

> block?

>

> cheers

>

> "Vera Noest [MVP]" wrote:

>

>> Check this:

>>

>> enable in the Default Domain Controller Policy:

>> Computer Configuration - Windows Settings - Security Settings -

>> Local Policies - User rights Assignment

>> "Allow log on through Terminal Services"

>>

>> and add the Remote Desktop Users group to the list of allowed

>> users _________________________________________________________

>> Vera Noest

>> MCSE, CCEA, Microsoft MVP - Terminal Server

>> TS troubleshooting: http://ts.veranoest.net

>> ___ please respond in newsgroup, NOT by private email ___

>>

>> =?Utf-8?B?c3BoaWxpcA==?= <sphilip@discussions.microsoft.com>

>> wrote on 29 nov 2007 in

>> microsoft.public.windows.terminal_services:

>>

>> > Yes i am trying to logon as the administrator & the 2nd user

>> > is a member of the administrator group.

>> >

>> > Is there any group policy i need to modify for me to access

>> > the server via RDP

>> >

>> > "Henrik Johansson" wrote:

>> >

>> >> Community Message Not Available